Your message dated Mon, 06 Feb 2006 14:04:56 -0800 with message-id <[EMAIL PROTECTED]> and subject line Bug#350598: fixed in samba 3.0.21b-1 has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database)
--- Begin Message --->From [EMAIL PROTECTED] Wed Jan 04 21:21:15 2006 Received: (at submit) by bugs.debian.org; 5 Jan 2006 05:21:16 +0000 Return-path: <[EMAIL PROTECTED]> Received: from ash25e.internode.on.net ([203.16.214.182]) by spohr.debian.org with esmtp (Exim 4.50) id 1EuNYp-0005Sz-Fv for [EMAIL PROTECTED]; Wed, 04 Jan 2006 21:21:15 -0800 Received: from stapler.kaolin.hn.org (ppp124-142.lns2.bne3.internode.on.net [59.167.124.142] (may be forged)) by ash25e.internode.on.net (8.13.5/8.13.5) with ESMTP id k055LC5b079987 for <[EMAIL PROTECTED]>; Thu, 5 Jan 2006 15:51:13 +1030 (CST) (envelope-from [EMAIL PROTECTED]) Received: from jonathan by stapler.kaolin.hn.org with local (Exim 4.50) id 1EuNYl-00058O-MF for [EMAIL PROTECTED]; Thu, 05 Jan 2006 15:21:11 +1000 Date: Thu, 5 Jan 2006 15:21:11 +1000 To: [EMAIL PROTECTED] Subject: smbd segfaults when accessed from win2k sp4 client Message-ID: <[EMAIL PROTECTED]> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-Represent-the-Ocean: Yes User-Agent: Mutt/1.5.9i From: Jonathan Matthew <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Level: X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2005_01_02 Subject: samba: segfaults when accessed from win2k sp4 client Package: samba Version: 3.0.21a-1 Severity: normal When I access samba using a Windows 2000 SP 4 client, smbd crashes during the authentication process. I don't see the same crash using smbclient. Setting 'log level = 10' in smb.conf results in the following interesting log data: [2006/01/05 13:31:21, 10] libsmb/ntlmssp.c:ntlmssp_server_auth(730) ntlmssp_server_auth: Failed to create NTLM session key. [2006/01/05 13:31:21, 5] libsmb/ntlmssp.c:ntlmssp_server_auth(756) server session key is invalid (len == 0), cannot do KEY_EXCH! [2006/01/05 13:31:21, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(332) NTLMSSP Sign/Seal - Initialising with flags: [2006/01/05 13:31:21, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0x600082b5 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_SEAL NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2006/01/05 13:31:21, 5] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(449) NTLMSSP Sign/Seal - using NTLM1 [2006/01/05 13:31:21, 0] lib/fault.c:fault_report(36) =============================================================== [2006/01/05 13:31:21, 0] lib/fault.c:fault_report(37) INTERNAL ERROR: Signal 11 in pid 26528 (3.0.21a-Debian) Please read the Trouble-Shooting section of the Samba3-HOWTO [2006/01/05 13:31:21, 0] lib/fault.c:fault_report(39) From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf [2006/01/05 13:31:21, 0] lib/fault.c:fault_report(40) =============================================================== [2006/01/05 13:31:21, 0] lib/util.c:smb_panic2(1544) smb_panic(): calling panic action [/usr/share/samba/panic-action 26528] [2006/01/05 13:31:21, 0] lib/util.c:smb_panic2(1552) smb_panic(): action returned status 0 [2006/01/05 13:31:21, 0] lib/util.c:smb_panic2(1554) PANIC: internal error [2006/01/05 13:31:21, 0] lib/util.c:smb_panic2(1562) BACKTRACE: 15 stack frames: #0 /usr/sbin/smbd(smb_panic2+0x7b) [0x801d973b] #1 /usr/sbin/smbd(smb_panic+0x11) [0x801d9961] #2 /usr/sbin/smbd [0x801c4816] #3 [0xffffe420] #4 /usr/sbin/smbd(ntlmssp_sign_init+0xda) [0x800dfcba] #5 /usr/sbin/smbd [0x800dd33d] #6 /usr/sbin/smbd(ntlmssp_update+0x21f) [0x800dc2ff] #7 /usr/sbin/smbd(auth_ntlmssp_update+0x39) [0x8021aa69] #8 /usr/sbin/smbd(reply_sesssetup_and_X+0x840) [0x80078c60] #9 /usr/sbin/smbd [0x800a338c] #10 /usr/sbin/smbd(process_smb+0x1a4) [0x800a3784] #11 /usr/sbin/smbd(smbd_process+0x1da) [0x800a47ca] #12 /usr/sbin/smbd(main+0x82b) [0x8026b38b] #13 /lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xd0) [0xb7c3ceb0] #14 /usr/sbin/smbd [0x8003e011] I'm reasonably (but not completely) sure that this problem only started with the recent samba package update. This trivial patch seems to fix it for me: --- samba-3.0.21a.orig/source/libsmb/ntlmssp.c 2006-01-05 14:05:22.000000000 +1000 +++ samba-3.0.21a/source/libsmb/ntlmssp.c 2006-01-05 14:02:22.000000000 +1000 @@ -389,7 +389,7 @@ to do this for the LM_KEY. */ - if (ntlmssp_state->neg_flags & NTLMSSP_NEGOTIATE_LM_KEY) { + if (ntlmssp_state->neg_flags & NTLMSSP_NEGOTIATE_LM_KEY && ntlmssp_state->session_key.data) { if (ntlmssp_state->neg_flags & NTLMSSP_NEGOTIATE_128) { ; } else if (ntlmssp_state->neg_flags & NTLMSSP_NEGOTIATE_56) { -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (990, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.14 Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Versions of packages samba depends on: ii debconf [debc 1.4.67 Debian configuration management sy ii libacl1 2.2.34-1 Access control list shared library ii libattr1 2.4.25-1 Extended attribute shared library ii libc6 2.3.5-11 GNU C Library: Shared libraries an ii libcomerr2 1.38+1.39-WIP-2005.12.10-2 common error description library ii libcupsys2 1.1.23-15 Common UNIX Printing System(tm) - ii libkrb53 1.4.3-5 MIT Kerberos runtime libraries ii libldap2 2.1.30-12 OpenLDAP libraries ii libpam-module 0.79-3 Pluggable Authentication Modules f ii libpam-runtim 0.79-3 Runtime support for the PAM librar ii libpam0g 0.79-3 Pluggable Authentication Modules l ii libpopt0 1.7-5 lib for parsing cmdline parameters ii logrotate 3.7.1-2 Log rotation utility ii lsb-base 3.0-13 Linux Standard Base 3.0 init scrip ii netbase 4.23 Basic TCP/IP networking system ii samba-common 3.0.21a-1 Samba common files used by both th Versions of packages samba recommends: pn smbldap-tools <none> (no description available) -- debconf information: samba/nmbd_from_inetd: * samba/log_files_moved: * samba/tdbsam: true * samba/generate_smbpasswd: true * samba/run_mode: daemons
--- End Message ---
--- Begin Message --->From [EMAIL PROTECTED] Mon Feb 06 14:12:43 2006 Received: (at 350598-close) by bugs.debian.org; 6 Feb 2006 22:12:43 +0000 Return-path: <[EMAIL PROTECTED]> Received: from katie by spohr.debian.org with local (Exim 4.50) id 1F6ETg-0004Z7-Jn; Mon, 06 Feb 2006 14:04:56 -0800 From: Christian Perrier <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] X-Katie: $Revision: 1.65 $ Subject: Bug#350598: fixed in samba 3.0.21b-1 Message-Id: <[EMAIL PROTECTED]> Sender: Archive Administrator <[EMAIL PROTECTED]> Date: Mon, 06 Feb 2006 14:04:56 -0800 X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Level: X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02 Source: samba Source-Version: 3.0.21b-1 We believe that the bug you reported is fixed in the latest version of samba, which is due to be installed in the Debian FTP archive: libpam-smbpass_3.0.21b-1_i386.deb to pool/main/s/samba/libpam-smbpass_3.0.21b-1_i386.deb libsmbclient-dev_3.0.21b-1_i386.deb to pool/main/s/samba/libsmbclient-dev_3.0.21b-1_i386.deb libsmbclient_3.0.21b-1_i386.deb to pool/main/s/samba/libsmbclient_3.0.21b-1_i386.deb python2.3-samba_3.0.21b-1_i386.deb to pool/main/s/samba/python2.3-samba_3.0.21b-1_i386.deb samba-common_3.0.21b-1_i386.deb to pool/main/s/samba/samba-common_3.0.21b-1_i386.deb samba-dbg_3.0.21b-1_i386.deb to pool/main/s/samba/samba-dbg_3.0.21b-1_i386.deb samba-doc-pdf_3.0.21b-1_all.deb to pool/main/s/samba/samba-doc-pdf_3.0.21b-1_all.deb samba-doc_3.0.21b-1_all.deb to pool/main/s/samba/samba-doc_3.0.21b-1_all.deb samba_3.0.21b-1.diff.gz to pool/main/s/samba/samba_3.0.21b-1.diff.gz samba_3.0.21b-1.dsc to pool/main/s/samba/samba_3.0.21b-1.dsc samba_3.0.21b-1_i386.deb to pool/main/s/samba/samba_3.0.21b-1_i386.deb samba_3.0.21b.orig.tar.gz to pool/main/s/samba/samba_3.0.21b.orig.tar.gz smbclient_3.0.21b-1_i386.deb to pool/main/s/samba/smbclient_3.0.21b-1_i386.deb smbfs_3.0.21b-1_i386.deb to pool/main/s/samba/smbfs_3.0.21b-1_i386.deb swat_3.0.21b-1_i386.deb to pool/main/s/samba/swat_3.0.21b-1_i386.deb winbind_3.0.21b-1_i386.deb to pool/main/s/samba/winbind_3.0.21b-1_i386.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [EMAIL PROTECTED], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Christian Perrier <[EMAIL PROTECTED]> (supplier of updated samba package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [EMAIL PROTECTED]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Mon, 6 Feb 2006 07:02:20 +0100 Source: samba Binary: samba-doc-pdf samba-doc libsmbclient libpam-smbpass swat winbind smbclient samba libsmbclient-dev samba-common samba-dbg python2.3-samba smbfs Architecture: source i386 all Version: 3.0.21b-1 Distribution: unstable Urgency: low Maintainer: [EMAIL PROTECTED] Changed-By: Christian Perrier <[EMAIL PROTECTED]> Description: libpam-smbpass - pluggable authentication module for SMB password database libsmbclient - shared library that allows applications to talk to SMB servers libsmbclient-dev - libsmbclient static libraries and headers python2.3-samba - Python bindings that allow access to various aspects of Samba samba - a LanManager-like file and printer server for Unix samba-common - Samba common files used by both the server and the client samba-dbg - Samba debugging symbols samba-doc - Samba documentation samba-doc-pdf - Samba documentation (PDF format) smbclient - a LanManager-like simple client for Unix smbfs - mount and umount commands for the smbfs (for kernels >= than 2.2. swat - Samba Web Administration Tool winbind - service to resolve user and group information from Windows NT ser Closes: 218511 231806 253437 258302 284681 313214 321005 333290 341814 346045 346069 346416 348419 350598 351448 Changes: samba (3.0.21b-1) unstable; urgency=low . * The "Tridge" release: celebrates the 2005 Free Software Award winner . * New upstream release . * Upstream bugs fixed by the new upstream release: - Support changing expired passwords in pam_winbindd. Closes: #258302 - vfs_full_audit fixes for multiple connections. Closes: #348419 - crashes of smbd in security=server mode Closes: #346045, #346069, #350598, #351448 . [ Peter Eisentraut ] * Put correct paths for Debian installations into the man pages, and remove outdated swat setup instructions therein. Closes: #321005 * Fix lintian overrides and install them into the right packages. * Remove swat inetd registration in remove, not purge. Closes: #313214 * Add findsmb script. Closes: #231806 * Fix sonames of libnss_win{bind,s}.so. Closes: #333290 * Remove autoconf build dependency. * Remove remnants of old patch system. * Install smbumount setgid root. Closes: #253437 * Add watch file. * Activate kernel oplocks. Closes: #218511 * Disable PIE compilation. Closes: #346416 . [ Christian Perrier ] * activate building of idmap_rid. Closes: #284681. Thanks to Ubuntu patches * activate building of idmap_ad. Closes: #341814 * modify the long description of the libsmbclient-dev package to avoid repeating the long description. Thanks, linda. . [ Steve Langasek ] * Also enable setresuid()/setresgid() on alpha and sparc now that support for Linux 2.2 is dropped. Files: ccc97b3fd55d4b39a8e8e2fe6aafa49d 1207 net optional samba_3.0.21b-1.dsc bb73dffb33f4a39386ef9f3e07ae28ff 17539079 net optional samba_3.0.21b.orig.tar.gz 992124e70b8bfe2363ea71457dac8e4a 277629 net optional samba_3.0.21b-1.diff.gz 0b988adf51bfd03e6e04ebf18a64648c 6896684 doc optional samba-doc_3.0.21b-1_all.deb 5aaff101a61150b94efb090aacdff27a 6589216 doc optional samba-doc-pdf_3.0.21b-1_all.deb c075f1c73e3c6d9e886cde2474da493c 3040604 net optional samba_3.0.21b-1_i386.deb 5e5ebe0799141507556bb7f46c3c00c4 2194310 net optional samba-common_3.0.21b-1_i386.deb 64f4ab72cff74cd6542864abdbcc89a5 3609170 net optional smbclient_3.0.21b-1_i386.deb e7dbd1b5428e7b70010176aa6451eb6f 755648 net optional swat_3.0.21b-1_i386.deb 451b2f3f0fc7fb500316f5c0243de22d 398004 otherosfs optional smbfs_3.0.21b-1_i386.deb 00b093e985876f6cc0b762e35af2fef5 380730 admin extra libpam-smbpass_3.0.21b-1_i386.deb ccfb1b71609336e409b072f369282cb2 720660 libs optional libsmbclient_3.0.21b-1_i386.deb 572414d8066f3ec45df075a62e1646cf 106626 libdevel extra libsmbclient-dev_3.0.21b-1_i386.deb bfe5574ea6af7006fdc972c0dd475671 1723068 net optional winbind_3.0.21b-1_i386.deb 26f67cfbd2122214e2409ced03071675 5382284 python optional python2.3-samba_3.0.21b-1_i386.deb c9b8bde91ce26a266644509d78af60e1 10068928 devel optional samba-dbg_3.0.21b-1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) iD8DBQFD55tP1OXtrMAUPS0RAm0yAJ4grCnGL3ZCIfjoCBpxJ8kZMuEZuQCbBPhz iPPCwWHvdBtTFhoHPLpyc1s= =YkzT -----END PGP SIGNATURE-----
--- End Message ---

